Your on-premises network contains an Active Directory domain. You have a Microsoft 365 subscription. You need to sync the domain with the subscription. The solution must meet the following…

Question

Options

• Apassword hash synchronization
• BAzure AD Identity Protection
• CAzure AD Seamless Single Sign-On (Azure AD Seamless SSO)
• Dpass-through authentication

• A
  10% (3)
• B
  3% (1)
• C
  3% (1)
• D
  83% (24)

Explanation

Pass-through authentication (PTA) works by forwarding every user authentication request to on-premises Active Directory agents in real time. This means on-premises AD password complexity policies are enforced at every sign-in attempt. When PTA is combined with password writeback (required for SSPR), users resetting their passwords via Azure AD SSPR will have their new passwords validated against on-premises AD complexity rules before the reset completes. Password hash synchronization (A) authenticates users in the cloud using a synced hash, so it does not enforce on-premises password policies at authentication time. Azure AD Identity Protection (B) is a risk-detection tool, not a sync method. Seamless SSO (C) is a convenience feature for single sign-on, not an authentication method that enforces on-premises policies.

No community discussion yet for this question.